"Although we are still investigating the details of this incident, we believe that an unauthorized person has obtained the following information that you provided: name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID. It is also possible that your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers may have been obtained. If you have authorized a sub-account for your dependent, the same data with respect to your dependent may have been obtained. While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility."

Worst case scenario: if you use the same password and email address to register for other services like online banking, the attacker will have very little problem getting into those accounts, too.

Sony has shut down the network and engaged an outside security firm to try and figure out what happened. Sony is rebuilding the network and says it will have some services back up in a week.